Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/wqgHI5khFcrRd3W3pxwPQX02Q6I.mft
File:                     wqgHI5khFcrRd3W3pxwPQX02Q6I.mft (raw, json)
Hash identifier:          4Eo8tVwarMWvSFcBUtf8eebBVZSPMsDlIkAnF9xtp+k=
Subject key identifier:   02:4E:71:4A:C3:7B:66:FE:F5:99:8F:04:15:AA:13:0B:06:20:92:95
Authority key identifier: C2:A8:07:23:99:21:15:CA:D1:77:75:B7:A7:1C:0F:41:7D:36:43:A2
Certificate issuer:       /CN=c2a80723992115cad17775b7a71c0f417d3643a2
Certificate serial:       01876EEADC91FECA22078AA06AE9A8FE0D50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqgHI5khFcrRd3W3pxwPQX02Q6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/wqgHI5khFcrRd3W3pxwPQX02Q6I.mft
Manifest number:          04A5
Signing time:             Tue 11 Apr 2023 06:04:58 +0000
Manifest this update:     Tue 11 Apr 2023 06:04:58 +0000
Manifest next update:     Wed 12 Apr 2023 06:04:58 +0000
Files and hashes:         1: W7RGMkdMK8dyydygqKWrIDXmfZA.roa (hash: hKMA4LCXgWq6mCGzKGDVOlXR41+f2MCxkGBWcmeITB4=)
                          2: wqgHI5khFcrRd3W3pxwPQX02Q6I.crl (hash: EVG5tKsWCKhWKnkWCAGfvhMA1tNKDizuWRDAYz98PxY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6e:ea:dc:91:fe:ca:22:07:8a:a0:6a:e9:a8:fe:0d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a80723992115cad17775b7a71c0f417d3643a2
        Validity
            Not Before: Apr 11 06:04:58 2023 GMT
            Not After : Apr 12 06:04:58 2023 GMT
        Subject: CN=024e714ac37b66fef5998f0415aa130b06209295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:d6:43:b2:6f:51:a5:15:33:7f:7f:77:28:
                    52:f9:b4:0e:f6:9c:c5:af:ad:bd:63:51:69:e8:5d:
                    8d:0b:37:68:da:c4:ca:4c:9d:81:cb:fe:10:5c:39:
                    b5:8f:fd:32:93:58:c2:81:fc:73:92:23:55:b7:9a:
                    1b:06:d5:ee:93:87:1e:1c:d3:b3:50:28:ee:52:a4:
                    4a:c5:4a:d6:7e:76:8a:f9:7a:a6:f8:aa:86:2c:a7:
                    f0:a9:04:c5:83:01:89:3e:51:9e:02:ff:b2:ef:db:
                    31:8c:1a:a8:8a:51:eb:b4:ca:88:f5:07:75:a5:34:
                    f8:a8:57:99:d5:b9:4f:6b:ed:64:7e:86:ee:2f:36:
                    ad:3f:d4:9d:7d:be:da:08:1c:39:43:25:68:69:9e:
                    bf:3b:37:3b:5c:bc:f3:a5:d1:12:c7:3c:f9:b5:fd:
                    31:63:e6:b2:f7:d0:c2:ea:bc:dd:f1:dc:3c:16:76:
                    ab:2f:b3:e3:fc:12:31:71:24:72:94:a4:3c:60:a3:
                    11:79:80:79:d1:37:4b:5a:e2:03:e8:8c:ce:7d:55:
                    77:d8:10:29:12:ff:cb:f0:7b:04:b4:fa:02:c7:21:
                    85:c6:84:0c:0e:72:97:20:7b:c6:08:37:1f:2f:2f:
                    8e:36:d2:bf:cc:ff:2d:b7:6a:b2:15:a9:90:32:ba:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4E:71:4A:C3:7B:66:FE:F5:99:8F:04:15:AA:13:0B:06:20:92:95
            X509v3 Authority Key Identifier:
                keyid:C2:A8:07:23:99:21:15:CA:D1:77:75:B7:A7:1C:0F:41:7D:36:43:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqgHI5khFcrRd3W3pxwPQX02Q6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/wqgHI5khFcrRd3W3pxwPQX02Q6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fefdee-74ee-4312-8333-434ae96b11de/1/wqgHI5khFcrRd3W3pxwPQX02Q6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7a:74:b2:83:86:b9:af:29:dc:62:2f:94:64:8a:3a:5e:14:
         aa:88:76:0c:7f:29:67:04:78:3e:fc:c3:85:54:59:1c:30:1a:
         ca:84:e1:15:06:3b:fa:47:c2:ee:fe:be:9c:88:b6:b8:80:a8:
         13:4b:67:8f:92:e3:e0:35:cb:bd:33:d4:3d:e3:90:94:95:0f:
         6c:29:5c:4e:32:fa:69:8a:ac:e0:e5:fa:be:d0:21:9c:18:9a:
         18:43:3b:6c:70:3e:9e:76:48:bb:ff:63:96:bf:01:89:86:ba:
         8d:1d:19:9e:83:e7:c5:a2:d8:f2:51:83:a9:60:2b:95:5f:05:
         df:d7:ab:16:db:d4:ca:73:0a:f9:ef:12:8b:6a:e8:06:10:10:
         f3:3c:f4:7b:84:b5:c2:e2:40:3e:24:44:6d:25:5a:bd:e1:3d:
         88:76:7b:da:39:94:da:86:e7:30:f0:bd:dc:82:78:6b:05:55:
         fa:bb:09:f8:03:b5:e5:d7:c7:2a:46:16:ba:c0:fd:ac:b6:86:
         8e:7d:83:e3:c6:a7:70:a9:3c:16:c8:c1:1c:ac:a6:6d:29:5f:
         a7:aa:63:3d:fb:10:f9:cb:6e:75:1b:01:14:ac:0f:59:02:22:
         bf:68:e9:63:71:ee:26:30:7b:2d:d0:27:65:da:b0:7b:b8:13:
         cf:16:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----